Software
GitLab
Complete DevOps platform with code hosting, CI/CD and security scanning
⚠️ Moderate Risk · Score 1.78/5
Product Details
- Vendor
- 🇺🇸 GitLab Inc.
- HQ Country
- 🇺🇸 US
- Risk Level
- ⚠️ Moderate
- Open Source
- Yes
- Data Portability
- Full
- Self-Hosted
- Yes
Hosting & Jurisdiction
Data Residency
🇳🇴 NO
🏳️ EU/EEA
Jurisdiction Exposure
🇺🇸 US
Self-managed option eliminates US jurisdiction. SaaS version has US exposure.
NDSI Assessment
1.8
/ 5.0 risk score
v1.0 · 2025-12-01
⚠️ Jurisdiction Risk
This product is subject to foreign jurisdiction (US), which may allow foreign authorities to compel data disclosure.
Key Concerns
- SaaS version under CLOUD Act
- Premium features require paid license
NDSI Assessment Breakdown
Norwegian Digital Sovereignty Index v1.0 — Assessed 2025-12-01
Data
✅ 1/5
Self-hosting possible, full data control
Environment
⚠️ 2/5
Remote-first company
Legal
🔶 3/5
Subject to CLOUD Act
Local presence
⚠️ 2/5
No dedicated Norwegian support
National security
✅ 1/5
Self-hosted option avoids US jurisdiction
Operational
✅ 1/5
Can be fully self-operated
Security
⚠️ 2/5
Good security, built-in SAST/DAST
Strategic
⚠️ 2/5
US headquarters, publicly traded
Supply chain
⚠️ 2/5
Some dependencies, but open core
Technology
✅ 1/5
Open source core, good portability
What You Can Do
Use GitLab Self-Managed
Host GitLab on your own servers in Norway/EU
Effort: High
Impact: High
Use Areas
Dev